CVE-2001-0967 Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password gu...
CriticalCVSS 9.8
EPSS 0.95%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Knox Arkeia server 4.2, and possibly other versions, uses a constant salt when encrypting passwords using the crypt() function, which makes it easier for an attacker to conduct brute force password guessing.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| arkeia | = 4.2 | No fix listed |
| arkeia | = 4.2.8-2 | No fix listed |
References
- 20010817 Arkeia Possible remote root & information leakage broken-link mailing-list
- 3204 broken-link patch third-party-advisory vdb-entry vendor-advisory